Concerned with software or hardware firewalls
1
vote
0answers
234 views
PF NFS Firewall Issue [closed]
I have a question about NFS and PF (freebsd). I know that NFS uses both TCP and UDP to connect to the client along with a bunch of daemons that use random port numbers. Both the NFS server and ...
0
votes
1answer
190 views
How does a Web Security Gateway analyse SSL Encrypted Traffic?
Since HTTPS traffic is encrypted in transit how does a web security gateway analyse it?
0
votes
3answers
646 views
why Windows Firewall in XP cannot block outbound connections
wikipedia say: XP's Windows Firewall cannot block outbound connections; it is only capable of blocking inbound ones.
another article says: XP defends you with your traffic coming from the web but ...
0
votes
2answers
2k views
IPTables default security rules for a gateway/router?
On a router such as dd-wrt or tomato, what would be some default iptables rules?
I am asking for rules on a router/gateway - For example; blocking SYN flood attacks, or XMAS attacks. The basic ...
0
votes
2answers
203 views
Any open source software firewall with country based ip blocking feature? [closed]
I am looking for an open source firewall with country based ip blocking feature for Linux OS.
0
votes
1answer
48 views
What triggers a Firewall to block a TCP Socket?
I was wondering what would cause a Firewall to block a TCP Java Socket from connecting. What would trigger that? Thanks!
0
votes
3answers
607 views
How to setup an internal firewall
I'm hoping to get some advice on a project I've been asked to look after at work. I do all of the IT for a small company that sits inside of a larger corporation. We need to prevent access to ...
0
votes
3answers
379 views
Best practices for firewall hardware
I'm planning to implement a linux based firewall/router with at least 6 x 1Gb NIC's (network with ~300 computers/server with >=8 VLANs)
Can anybody recommend hardware best practices (reference to ...
0
votes
3answers
268 views
Some issues with iptables and nmap
When I scan my pc with nmap I see only one open port. I didn't define any rule in iptables so if I'm not mistaken, all connections should be denied by default.
However I can use HTTP or SSH, so that ...
0
votes
2answers
167 views
can a backdoor executable be used on an occupied port?
Suppose I am doing a penetration test on a network that has a firewall that blocks all ports except 80, 110, and 443. I want to use a metasploit reverse-TCP backdoor executable written in msfpayload ...
0
votes
2answers
78 views
Should a host based firewall have an API accessible to other applications?
Some people are hesitant to use Windows Firewall because it allows software to alter its state via an API. The benefit of this is that the Firewall configuration can be centrally manged in GPO.
On ...
0
votes
2answers
119 views
Can I connect our network to the internet but only allow connections to certain servers?
At work we have a network that is not connected to the internet however it is exposed to the outside work through USB drives and employees cell phones. I'd like to connect our system to the internet ...
0
votes
1answer
510 views
Router with good Firewall for office - total of 50 computers/devices including wifi devices [closed]
I am looking for a good Office Router that can handle good firewall rules, have logs, and ca support about 50 computers/devices connected with wire and wireless.
We had different models before, and ...
0
votes
1answer
591 views
i, I, o, O packet inspection points inside a Check Point firewall
In a Check Point firewall, can you please explain what occurs between the POSTIN (I) and PREOUT (o) inspection points?
0
votes
1answer
73 views
Securing my firewall (both dedicated and iptables-based) [closed]
I have an ASA-5510, but I also intend to maintain strict IP tables on my server (Ubuntu 12.04.2), so that there are two layers of "protection".
My iptables look like this:
*filter
# Allows all ...
0
votes
1answer
193 views
icmp packets not able to reach the firewall despite of adding a specific rule, why?
I am using iptables to allow the icmp traffic in/out of my host. Please find below are the entries from my firewall (linux based):-
[root@localhost ~]# iptables -L
Chain INPUT (policy DROP)
target ...
0
votes
1answer
271 views
Websocket implication for firewalls
(I've read several questions here about websocket but apparently there's no websocket tag)
If I understand correctly websockets are using TCP trafic over port 80.
What are the implication, if any, ...
0
votes
1answer
69 views
Situations that a firewall should use rule for all packets
When should a "match all packets" rule be used (instead of chain policy)?
I think that this should be used in real time applications like audio streaming or video broadcasting. Are there other ...
0
votes
1answer
112 views
Packet-filtering firewall evasion (Scanning)
Context
I'm very familiar with different applications of scanning tools (. . . and you can use -mtu to specify the size of the fragments in nmap . . .) but every piece of information I read about ...
0
votes
1answer
83 views
Weird issue with Firewall blocking NATed packets
From my SIEM I am seeing that a (we don't own the FW) Cisco ASA is blocking packets destined for the internal network (post NAT), here's what I'm seeing (IP addresses are faked due to security)
...
0
votes
1answer
135 views
Windows Firewall accepts a three-second unicast response from any source
I have read this article but still has some doubts may be after that...
The Windows Firewall feature in Microsoft Windows XP Service Pack 2
(SP 2) accepts a three-second unicast response from ...
0
votes
1answer
104 views
How to secure unprotected Telnet Server on Droid 3
I have a Droid 3 and for whatever reason it has a Telnet Server running on port 23. It requires no credentials and it has root permissions. It bothers me when I'm connected to wifi networks because my ...
0
votes
2answers
277 views
Enabling firewall for the IPv6 tunnel on Windows 2008 64-bit
I am currently on a IPv4 network. The IPv4 network is accessed by a router, which gives my machines IPv4 addresses via NAT.
On one of the machines, a Windows 2008 64-bit machine, I have set up a IPv6 ...
0
votes
1answer
276 views
Securing firewalls for XAMPP on Mac OS X
I've recently installed XAMPP on my Mac OS X 10.6.8, and this has caused me to reevaluate how I have my firewall setup. Right now I am using the two firewalls that came pre-installed on my computer:
...
0
votes
1answer
273 views
Cisco PIX SNMP enabled or not?
On a Cisco PIX firewall, I wanted to check if SNMP is enabled:
pix# sh snmp-server
no snmp-server location
no snmp-server contact
snmp-server community public
no ...
0
votes
1answer
136 views
FoundStone scan + URI filtering
I have a server that is protected with a firewall with URI filtering rule.
So if you go http://x.x.x.x/URIFilter/Something you will get to the server, but if you don't put URIfilter into URL or use ...
0
votes
1answer
926 views
windows security alert windows firewall has blocked some features of this program message coming for every new build of my application
I made an application which uses ftp so windows shows windows security alert windows firewall has blocked some features of this program message for every new version of my application any idea how to ...
0
votes
1answer
414 views
JUNIPER Junos Pulse - how to apply policy to device
we'd like setup and use Juniper Junos Pulse at iphone and ipad for access to Corporate mail.
we have juniper SA, prepare policy, but Question: how to apply policy for device?
0
votes
1answer
75 views
allowing inbounding UDP datagram if outbound has been done [closed]
Situation:
S: Server computer.
F: Hardware device between S and end-user clients
S uses both TCP and UDP for service.
A client (C) connect to S and establish UDP virtual connection.
For knowing ...
0
votes
0answers
1k views
What program could try to reach fbstatic-a.akamaihd.net:443 continuesly? [closed]
Social networking is blocked by K9 Web Protection. The keywords "fb", "facebook" are blokked as well. However K9 continuesly pops up the following:
http://i.stack.imgur.com/FviFb.png
It says ...
0
votes
0answers
118 views
Tool too scan open ports on a firewall [closed]
How can we check which ports are open on a firewall that use header flags?
Any free tool that sends packets to the host to map these ports?
0
votes
0answers
240 views
Looking for OpenSource Firewall [closed]
I am working on Linux environment. I am looking for an open source firewall with code base in C/C++ or Python. Any suggestions.
0
votes
1answer
133 views
How do I use two different Public IP to add a new server to the DMZ? [closed]
My network looks something like this;
INTERNET»»ROUTER»»ASA FIREWALL»»»INTERNAL NETWORK
Right now, we are using a public IP in a range like for instance of 50.224.157.105, which we are using in the ...
0
votes
0answers
22 views
Security value of restricting ports for outgoing connections [duplicate]
Possible Duplicate:
Why block outgoing network traffic with a firewall?
Please provide a clear explanation of what the value would be for this? If you have set up a firewall that blocks all ...
0
votes
0answers
79 views
Exhaustive list of abuse notifications that organizations get [closed]
What are the different types of abuse notifications that organizations get? Here are some I could get off the web, but would be good to identify if someone already has a list of "types of abuse" ...
0
votes
0answers
1k views
Open Source (Software Firewall + Unified Threat Management - UTM) for an Linux Dedicated Server Hosting [closed]
I am newbie in managing Linux Dedicated server. I am looking for Best Open source Unified Threat Management solution with Firewall Support and it should need to be managing through an web GUI ...
0
votes
0answers
16 views
What are some real world examples of screened subnet firewall architecture? [duplicate]
Possible Duplicate:
Public DMZ network architecture
screened subnet firewall architecture has a DMZ
the outisde world doesnt know about the inside network beyond DMZ
and inside doesnt know ...
0
votes
1answer
658 views
Juniper SRX210, how to make port forwarding work? [closed]
I have a PC 192.168.1.151 which needs 554 and 9001 publicly available. So I used the following configuration but it does not work. Can anyone see my mistake ?
version 10.0R3.10;
system {
...
-1
votes
3answers
136 views
What is the difference between a Gateway and a Firewall? [closed]
What is the difference between a Gateway and a Firewall and how do they relate to one another?
I am a developer trying to get a general understanding of network security.
-1
votes
3answers
1k views
What, specifically, does the Windows Firewall do?
My understanding of the situation is that, when the Windows firewall is off, every port on the computer (all 65535 of them) is fully open. This means that any application running on the computer can ...
-1
votes
1answer
228 views
What do current generation firewalls lack?
Are current generation firewalls ( both commercial and open source) good enough to combat current generation attacks (of course when properly configured) ?
By large , what do current generation ...
-1
votes
3answers
369 views
An alien packet from the switch shut down my ethernet card when using nessus?
I'm stuck in between a very bad cocktail mix of two very desperate technologies. One is Nessus and other is a Juniper EX2200. When I'm running the two together, the NIC on my HP MiniTower 6200 Pro ...
-1
votes
2answers
671 views
IP Spoofing a threat?
Quick Security Question if i may.
We have an internal Intranet system which is only accessible from a few internal vlans, our main external firewall blocks all access to the internal webserver – or ...
-1
votes
2answers
104 views
Allow embedded videos while keeping youtube blocked [closed]
Our organization has launched a training program for employees. the hosting server(internal), has YouTube videos embedded. we have YouTube blocked, and employees access the internet via proxy.
How can ...
-1
votes
2answers
1k views
windows firewall disabled with Norton Internet security or Norton Smart Firewall? [closed]
My Company decide to Change antiviruses and anti-spywares and firewalls.
How to apply changes in all clients and servers safety?
Norton say: ( in this article):
When you are using Windows ...
-1
votes
1answer
954 views
How to bypass firewall protection to hack windows server 2003? [closed]
I am trying to hack windows server 2003 sp2, i can see a lot of services running on target, there is also a lot of backdoors listing on ports like netbus, remote-everything ....
But Firewall (as i ...
-1
votes
1answer
374 views
Linux tools to choose suitable Cisco ASA 5500
I have a linux webhosting server which affects a high DDOS.
I want to use Cisco ASA 5500 Series Adaptive Security Appliances to protect the linux server from this DDOS. I know there are many factors ...
-1
votes
0answers
35 views
How to block WCF services using Firewall or any other security setting
For an application testing purpose I want to know how to block applications that are trying host http WCF host services. Could someone please point me the right place to block? I've been guessing and ...
-1
votes
1answer
73 views
Is there a tool I can use to see if my website is being blocked by common business content filters? [closed]
Not 100% sure this is the right site, but hey-ho,
Title sums it up, I'm getting sporadic reports from a couple of clients that people visiting bits of their sites are being blocked with a message ...
-1
votes
1answer
117 views
How to find IP Addresses that have been attacking my Computer Ports ?
I am a newbie at Info Sec, and wanted to know which IP addresses are sources of attack traffic.
Can I also find out which ports are being attacked?
Can this information be found in windows firewall? ...
